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AMENDMENTS TO THE CLAIMS 

For the convenience of the Examiner, all claims have been presented whether or not 
an amendment has been made. 

1. (Currently Amended) In an e l e ctronic d e vic e in communication with a 
n e twork, a m e thod A method for authenticating and authorizing a user of an electronic device 
in communication with a network , comprising th e st e ps of : 

receiving a user request from a user of an electronic device in communication with a 
network ; 

d e t e rmining an id e ntity of said us e r, wh e r e in said st e p of d e t e rmining further 
comprises the stops of: 

searching for information relating to said user in a repository of user information, said 
searching based at least partially on said user request and a login identity supplied by said 
user; 

retrievin g, from the repository of user information, a unique universal user identifier 
representing said user upon locating said information of said user; 

storing at least said unique universal user identifier in a data packet; 

sending said data packet to a storage device such that said data packet is transmittable 
to electronic devices in communication with said network when said user attempts to access a 
resource within said network; and 

retrieving an authorization datum associated with said user, based at least partially on 
said unique universal user identifier, from said resource. 

2. (Currently Amended) The method of claim 1, wherein said receiving a user 
request comprises receiving a login name from said user st e p compris e s said us e r providing a 
login nam e to said n e twork . 

3. (Currently Amended) The method of claim 1, wh e r e in prior to said s e arching 
stop, said method further comprising the steps of : 

registering said user with said network; 

generating said unique universal user identifier relating to said user; 

inserting said unique universal user identifier in said repository of user information; 
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and 

populating a plurality of repositories containing authorization data with said user 
identifier. 

4. (Currently Amended) The method of claim 1, further comprising receiving a 
security identity from said user the step of said us e r providing a security identity . 

5. (Currently Amended) The method of claim 1, further comprising receiving a 
digital certificate from said user the step of said user providing a digital c e rtificat e. 

6. (Currently Amended) The method of claim 1, wh e r e in said d e t e rmining st e p 
further comprises further comprising indicating a result to said user regarding permitted 
access to said network. 

7. (Currently Amended) The method of claim 1, wh e r e in said d e t e rmining st e p 
further comprises further comprising requesting a user credential of said user. 

8. (Currently Amended) The method of claim 1, wherein said s e nding st e p 
furth e r compris e s sending said data packet to a storage device comprises sending said data 
packet to a user electronic device supporting said storage device. 

9. (Currently Amended) The method of claim 1, further comprising the st e p of 
storing information in addition to said unique universal user identifier in said data packet. 

10. (Currently Amended) The method of claim 1, wherein said s e nding st e p 
sending said data packet to a storage device comprises transmitting a cookie to said user 
electronic device enabling an identity of said user to be automatically recognized when said 
cookie is transmitted to said resource within said network. 

11. (Currently Amended) The method of claim 1, further comprising th e st e p of 
encrypting said data packet. 
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12. (Currently Amended) In an e l e ctronic device in communication with a 
n e twork, a m e thod for a us e r to acc e ss A method for accessing a plurality of resources having 
different authorization requirements, the m e thod comprising: 

said n e twork storing a plurality of uniqu e univ e rsal us e r id e ntifi e rs with said plurality 
of resourc e s; 

said user acc e ssing said network via a user el e ctronic d e vic e accessing, via an 
electronic device, a network comprising a plurality of resources ; 
said user providing identifying data to said network; 

said n e twork retrievin g, in response to the identifying data, a unique universal user 
identifier for corresponding to said user in— a from a repository of unique universal user 
identifiers; 

said n e twork storing said unique universal user identifier on a storage device, said 
unique universal user identifier indicating said user is authenticated; and 

said user accessing one of said plurality of resources, wherein said unique universal 
user identifier is transmitted to said one of said plurality of resources to identify said user 
such that said user can access authorized resources without providing additional identifying 
information and said user is denied access to unauthorized resources. 

13. (Currently Amended) The method of claim 12, further comprising said uniqu e 
universal user identifier providing a key to retrieve an authorization datum associated with 
one of said plurality of unique universal user identifiers matching said unique universal user 
identifier from one of said plurality of resources. 

14. (Currently Amended) The method of claim 12, wh e r e in prior to said st e p of 
storing s aid plurality of uniqu e univ e rsal user identifiers, said method further comprising the 
st e ps of : 

said us e r registering said user with said network; 

said network generating said unique universal user identifier for said user; and 
said n e twork inserting said unique universal user identifier in at least one of said 
plurality of unique universal user identifiers. 
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15. (Currently Amended) The method of claim 12, wherein said proving st e p 
compris e s said us e r providing identifying data to said network comprises supplying at least 
one of a login name, a password, and a digital certificate. 

16. (Currently Amended) The method of claim 12, wher e in prior to said storing 
said unique user id e ntifi e r step, said method further comprising said us e r wherein providing 
identifying data to said network comprises providing user credentials. 

17. (Currently Amended) The method of claim 12, claim 16, wh e r e in prior to said 
storing said uniqu e univ e rsal user id e ntifi e r st e p, said method further comprising said us e r 
wherein providing identifying data to said network comprises providing a digital certificate. 

18. (Currently Amended) A method impl e m e nt e d by at l e ast on e e l e ctronic d e vic e 
for user authentication and authorization using a uniqu e univ e rsal us e r id e ntifi e r to r e tri e v e 
us e r data, th e m e thod comprising the steps o f , comprising : 

accessing a repository containing a plurality of unique universal user id e ntifi e rs; 
identifiers, each of said unique universal user identifiers being unique to a user; 

retrieving one of said unique universal user identifiers id e ntifier from said repository, 
said uniqu e univ e rsal us e r id e ntifier b e ing unique to a user; 

storing said unique universal user identifier in a data packet readable by an electronic 

device; 

transmitting said data packet to a storage device coupled to said electronic device; and 
making said data packet available to a resource configured within an enterprise 
network to authorize said user. 

19. (Currently Amended) The method of claim 18, wherein storing said unique 
universal user identifier said st e p of storing comprises packaging said unique universal user 
identifier in a cookie suitable for storage on at least one of a user electronic device and a user 
proxy electronic device. 

20. (Currently Amended) The method of claim 19, further comprising th e st e p of 
employing a software program e mploy e d to access a network reading said storage device. 
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21. (Currently Amended) The method of claim 19, further comprising th e st e p of 
employing a web browser employ e d to access a network reading said storage device. 

22. (Currently Amended) The method of claim 1 8, further comprising th e st e ps of : 
delivering said data packet to said resource configured within said enterprise network; 
extracting said unique universal user identifier from said data packet; 

accessing a repository containing a plurality of user entitlement data; and 

retrieving a user-specific entitlement from said repository containing said plurality of 

user entitlement data using said unique universal user identifier to locate said user-specific 

entitlement. 

23. (Currently Amended) A system for user authentication and authorization, A 
n e twork of e l e ctronic d e vic e s suitabl e for impl e m e nting a m e thod for auth e ntication and 
authorization using a uniqu e univ e rsal us e r id e ntifi e r to r e tri e v e us e r data, said n e twork of 
e l e ctronic d e vic e s comprising: 

a repository containing a plurality of unique universal user identifiers, each unique 
universal user identifier being unique to a user and said r e pository b e ing in communication 
with said n e twork ; 

a first software tool suitabl e for r e c e iving operable to receive user login information, 
acc e ssing access said repository, locating retrieve a unique universal user identifier relating to 
said user, and transmitting any such transmit said unique universal user identifier to an 
electronic storage device suitable for storing said unique universal user identifier in a data 
packet for transmission to resources within a network said n e twork ; and 

a user electronic d e vice suitabl e for communication with said n e twork; and 
a second software tool suitable for receiving said data packet and locating 
authorization datum of said user. 

24. (Currently Amended) The system of network of e l e ctronic devic e s according 
te claim 23, wherein said electronic storage device is readable by a software program suitable 
for accessing said network. 
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25. (Currently Amended) The system of network of electronic d e vic e s according 
to claim 24, wherein said software program is a web browser. 

26. (Currently Amended) The system of n e twork of e l e ctronic d e vic e s according 
te claim 23, wherein said electronic storage device is a resource configured within said 
network. 

27. (Currently Amended) The system of n e twork of e l e ctronic d e vic e s according 
te claim 23, further comprising a repository containing authorization data, said repository 
containing authorization data accessible using said unique universal user identifier as a key to 
retrieve a user-specific entitlement associated with said user. 

28. (Currently Amended) A computer-readable medium encoded with logic 
operable, when executed on a computer processor, to perform the steps comprising comput e r 
readable m e dium containing a softwar e program for e x e cuting a m e thod for auth e nticating 
and authorizing a user, said m e thod comprising th e steps of : 

receiving a user request from a user of an electronic device; 

d e t e rmining an id e ntity of said us e r, wh e r e in said step of determining furth e r 
compris e s th e st e ps of: 

searching for information of said us e r a user credential corresponding to said user in 
an authentication database; 

locating said user credential in reference to said us e r in said authentication database; 

retrieving a unique universal user identifier representing said user upon locating said 
user credential in ref e r e nc e to said us e r ; 

packaging at l e ast said unique universal user identifier in a data packet; and 

transmitting said data packet to a us e r said electronic device such that said data packet 
is transmittable to electronic devices in communication with a network when said user 
attempts to access a resource within said network such that said user can access authorized 
resources without providing additional identifying information. 
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29. (Currently Amended) The comput e r r e adabl e computer-readab le medium of 
claim 28, wherein the method executed by th e softwar e program furth e r compris e s th e st e ps 
ef further operable, when executed on a computer processor, to perform the steps comprising : 

transmitting said data packet to said resource within said network; 

accessing a repository containing a plurality of unique universal user identifiers using 
said packaged unique universal user identifier in a search operation; and 

retrieving a user-specific entitlement from said repository containing a plurality of 
unique universal user identifiers, said user-specific entitlement associated with said packaged 
unique universal identifier. 

30. (Currently Amended) The comput e r r e adable computer-readable medium of 
claim 28, wh e r e in th e m e thod e x e cuted by th e softwar e program further comprises the stop of 
further operable, when executed on a computer processor, to perform the step of requesting a 
user credential. 
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